CWE-476 · NULL Pointer Dereference (page 25)
Page 25 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-30755 | Medium | 4.4 | 2024-09-10 | A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All ve… |
CVE-2023-28827 | Medium | 5.9 | 2024-09-10 | A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All ve… |
CVE-2024-7652 | High | 7.5 | 2024-09-06 | An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an ex… |
CVE-2023-51368 | Medium | 5.4 | 2024-09-06 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users… |
CVE-2023-52915 | Medium | 5.5 | 2024-09-06 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer In af9035_i2c_mas… |
CVE-2024-42491 | Medium | 5.7 | 2024-09-05 | Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.24.3, 20.9.3, and 21.4.3 of Asterisk and versions 18.9-cert12 and 20.7-cert2 of… |
CVE-2024-45006 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating fu… |
CVE-2024-45002 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: rtla/osnoise: Prevent NULL dereference in error handling If the "tool->data" allocation f… |
CVE-2024-45000 | High | 7.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: fs/netfs/fscache_cookie: add missing "n_accesses" check This fixes a NULL pointer derefer… |
CVE-2024-44992 | High | 7.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid possible NULL dereference in cifs_free_subrequest() Clang static checke… |
CVE-2024-44990 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bond_ipsec_offload_ok We must check if there is an act… |
CVE-2024-44989 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix xfrm real_dev null pointer dereference We shouldn't set real_dev to NULL bec… |
CVE-2024-44960 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set befor… |
CVE-2024-42058 | High | 7.5 | 2024-09-03 | A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V… |
CVE-2024-8006 | Medium | 4.4 | 2024-08-31 | Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions t… |
CVE-2024-8235 | Medium | 6.2 | 2024-08-30 | A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0… |
CVE-2024-20446 | High | 8.6 | 2024-08-28 | A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… |
CVE-2024-44939 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix null ptr deref in dtInsertEntry [syzbot reported] general protection fault, prob… |
CVE-2024-44937 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-vbtn: Protect ACPI notify handler against recursion Since commit e2ff… |
CVE-2024-44935 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseport_add_sock(). syzbot reported a null-ptr-deref while… |
CVE-2024-43911 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL dereference at band check in starting tx ba session In MLD conne… |
CVE-2024-43909 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference for smu7 optimize the code to avoid pass… |
CVE-2024-43908 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer dereference to ras_manager Check ras_manager before usin… |
CVE-2024-43907 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules Check the poi… |
CVE-2024-43906 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/admgpu: fix dereferencing null pointer context When user space sets an invalid ta typ… |
CVE-2024-43905 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr Check return value and cond… |
CVE-2024-43904 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing This commi… |
CVE-2024-43902 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checker before passing variables Checks null pointer before pas… |
CVE-2024-43901 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401 When users run the co… |
CVE-2024-43899 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null pointer deref in dcn20_resource.c Fixes a hang thats triggered… |
CVE-2024-43896 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: ASoC: cs-amp-lib: Fix NULL pointer crash if efi.get_variable is NULL Call efi_rt_services… |
CVE-2024-43894 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/client: fix null pointer dereference in drm_client_modeset_probe In drm_client_modese… |
CVE-2024-43886 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check in resource_log_pipe_topology_update [WHY] When switching… |
CVE-2024-43884 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to pair_device() hci_conn_params_add() never checks f… |
CVE-2024-45239 | High | 7.5 | 2024-08-24 | An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) an ROA or a… |
CVE-2024-45238 | High | 7.5 | 2024-08-24 | An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource… |
CVE-2024-45235 | High | 7.5 | 2024-08-24 | An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource… |
CVE-2022-48942 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: hwmon: Handle failure to register sensor with thermal zone correctly If an attempt is mad… |
CVE-2022-48922 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: riscv: fix oops caused by irqsoff latency tracer The trace_hardirqs_{on,off}() require th… |
CVE-2022-48918 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: check debugfs_dir ptr before use When "debugfs=off" is used on the kernel c… |
CVE-2022-48915 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference Do not call get_trip_hyst() from… |
CVE-2022-48914 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: xen/netfront: destroy queues before real_num_tx_queues is zeroed xennet_destroy_queues()… |
CVE-2022-48908 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() During driver initializa… |
CVE-2021-4441 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() In zynq_qsp… |
CVE-2023-52911 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: another fix for the headless Adreno GPU Fix another oops reproducible when reboo… |
CVE-2023-52909 | High | 7.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of cached open files in nfsd4_open codepath Commit fb70bf124b05 ("NFSD… |
CVE-2023-52908 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix potential NULL dereference Fix potential NULL dereference, in the case wh… |
CVE-2023-52904 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() Th… |
CVE-2023-52901 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Check endpoint is valid before dereferencing it When the host controller is no… |
CVE-2023-52899 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: Add exception protection processing for vd in axi_chan_handle_err function Since there is… |
CVE-2023-52898 | Medium | 4.7 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference when host dies Make sure xhci_free_dev() and xhci_kill… |
CVE-2023-52896 | Medium | 4.7 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between quota rescan and disable leading to NULL pointer deref If we have… |
CVE-2023-52894 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() In Google internal bug… |
CVE-2023-52893 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: gsmi: fix null-deref in gsmi_get_variable We can get EFI variables without fetching the a… |
CVE-2022-48895 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Don't unregister on shutdown Michael Walle says he noticed the following… |
CVE-2022-48894 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Don't unregister on shutdown Similar to SMMUv2, this driver calls iomm… |
CVE-2022-48886 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ice: Add check for kzalloc Add the check for the return value of kzalloc in order to avoi… |
CVE-2022-48884 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix command stats access after free Command may fail while driver is reloading… |
CVE-2022-48882 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) … |
CVE-2022-48879 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported… |
CVE-2022-48876 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix initialization of rx->link and rx->link_sta There are some codepaths… |
CVE-2022-48875 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: sdata can be NULL during AMPDU start ieee80211_tx_ba_session_handle_start… |
CVE-2022-48870 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: tty: fix possible null-ptr-defer in spk_ttyio_release Run the following tests on the qemu… |
CVE-2022-48868 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Let probe fail when workqueue cannot be enabled The workqueue is enabled… |
CVE-2024-43875 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Clean up error handling in vpci_scan_bus() Smatch complains about inconsis… |
CVE-2024-43874 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked Fix a null pointe… |
CVE-2024-43866 | Medium | 4.7 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health in shutdown callback There is no point in recovery during d… |
CVE-2024-43860 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Skip over memory region when node value is NULL In imx_rproc_addr_… |
CVE-2024-43859 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate preallocated blocks in f2fs_file_open() chenyuwen reports a f2fs bu… |
CVE-2024-43857 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix null reference error when checking end of zone This patch fixes a potentially n… |
CVE-2024-43855 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: md: fix deadlock between mddev_suspend and flush bio Deadlock occurs when mddev is being… |
CVE-2024-43837 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT When loadi… |
CVE-2024-43836 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE… |
CVE-2024-43833 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix NULL pointer dereference in adding ancillary links In v4l2_async_c… |
CVE-2024-43829 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/qxl: Add check for drm_cvt_mode Add check for the return value of drm_cvt_mode() and… |
CVE-2024-43827 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check before access structs In enable_phantom_plane, we should… |
CVE-2024-43826 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfs_folio_length is unsafe to use without… |
CVE-2024-43824 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()… |
CVE-2024-43823 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_re… |
CVE-2024-43822 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe() The… |
CVE-2024-43821 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix a possible null pointer dereference In function lpfc_xcvr_data_show, the… |
CVE-2024-43819 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: kvm: s390: Reject memory region operations for ucontrol VMs This change rejects the KVM_S… |
CVE-2024-43818 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: Adjust error handling in case of absent codec device acpi_get_first_physical_n… |
CVE-2024-43816 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages On big endi… |
CVE-2024-42320 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error checks in dasd_copy_pair_store() dasd_add_busid() can return an erro… |
CVE-2024-42310 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes In cdv_intel_lvds_ge… |
CVE-2024-42309 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes In psb_intel_lvds_ge… |
CVE-2024-42307 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path Dan Car… |
CVE-2024-42303 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: media: imx-pxp: Fix ERR_PTR dereference in pxp_probe() devm_regmap_init_mmio() can fail… |
CVE-2024-42298 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value devm_kasprintf() can retu… |
CVE-2024-42289 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: During vport delete send async logout explicitly During vport delete, it i… |
CVE-2024-42287 | High | 8.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early within lock A crash was observed while performing N… |
CVE-2024-42286 | High | 7.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: validate nvme_local_port correctly The driver load failed with error messa… |
CVE-2024-42282 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling Move t… |
CVE-2024-42278 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ASoC: TAS2781: Fix tasdev_load_calibrated_data() This function has a reversed if statemen… |
CVE-2024-42277 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en In sprd_iommu_cleanup() before calling… |
CVE-2024-42270 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). We had a report that… |
CVE-2024-42269 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). ip6table_… |
CVE-2024-42266 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: make cow_file_range_inline() honor locked_page on error The btrfs buffered write p… |
CVE-2023-52889 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix null pointer deref when receiving skb during sock creation The panic below… |